fond-of-impala/company-product-lists-bulk-rest-api

Release historycaution

This is the package's only release, published nearly two years ago, with no releases in the last 12 months. That is a meaningful maintenance concern for a dependency, despite the package being stable rather than prerelease.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the single-release history, this indicates limited recent maintenance capacity.

Repo toolingcaution

The repository uses Make and Composer for builds, showing basic build structure. No security-scanning tooling is configured, which is a modest process gap.

Security policycaution

The repository has no security policy. For a package exposing a REST API integration, that reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts or injection findings, but all three action references are unpinned. The workflow also lacks a top-level permissions block; neither issue is severe alone, but both weaken release hygiene.